Security & trust

Your clients' data, handled properly

A salon holds more personal information than most people realise. Names, numbers, treatment history, sometimes health notes. Here is exactly how that is protected, and what we will and will not claim.

Book a free demo Hear it live
How it works

What we do

Built on certified infrastructure

SalonAnswer runs on an enterprise voice platform that holds SOC 2 Type II and ISO 27001 certification. Those certifications belong to that provider, not to SalonAnswer or ETJP Group Limited. We have not been independently audited and we do not claim to have been. We can provide the provider's current attestation on request.

New Zealand Privacy Act 2020

ETJP Group Limited has an appointed Privacy Officer, a documented breach response process, and collects only the information needed to handle your calls. You can request access to or deletion of data at any time.

Callers are told about recording and AI

Disclosure is built into the greeting on every deployed agent. You choose the wording; the disclosure itself is not optional, because that is what keeps it lawful.

Encryption in transit and at rest

Call recordings and transcripts are encrypted both in transit and at rest, and retained only for the period you agree to, then deleted on schedule rather than kept indefinitely.

Audit logs and role-based access

Every call, booking and change is logged with a timestamp. Your team sees your salon only, and access is removed the day someone leaves.

Your client data is yours

We do not sell, rent or share client information, and we do not use your call content to train public AI models.

What we will not claim

Plenty of AI companies put certification badges on their homepage that belong to their hosting provider, not to them. We think that is misleading, so we do not do it.

We do not hold SOC 2, ISO 27001, HIPAA or IRAP certification ourselves. Our infrastructure provider holds some of those, and where that is relevant to you we will say so and show you the evidence. HIPAA and TCPA are United States regulations and have no bearing on a New Zealand salon, so we do not list them.

If your business has specific compliance obligations, raise them on the demo call. We would rather tell you honestly that we cannot meet a requirement than discover it after you have signed.

FAQ

Security questions

Is SalonAnswer SOC 2 certified?
No. The voice platform SalonAnswer is built on holds SOC 2 Type II and ISO 27001. ETJP Group Limited has not been independently audited, and we will not claim otherwise. We can supply the provider's attestation if a client asks.
Where is our call data stored?
This depends on the region configured for your account. We are confirming current arrangements with our infrastructure provider and will state the answer here precisely once verified rather than guess at it.
Are calls recorded?
Yes, where you enable it, and callers are told at the start of the call. Retention length is agreed with you and recordings are deleted on that schedule.
Can we get our data deleted?
Yes. Request it in writing and we will delete client data held on your behalf, subject to any legal retention obligations.
What about health information?
Beauty and skin clinics sometimes collect health details. Raise this on the demo call so we can scope it properly, including what the agent should never ask or record.

Ask us the awkward questions

Bring your compliance requirements to the demo call. We will answer straight.

Book a free demo Hear it live
Hear it live Book a demo